Enforce opt-out policy check

IABTechLab · Sep 11, 2023 · 013f5bf · 013f5bf
1 parent 8cfe605
commit 013f5bf
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/src/main/java/com/uid2/operator/model/TokenGeneratePolicy.java b/src/main/java/com/uid2/operator/model/TokenGeneratePolicy.java
@@ -19,4 +19,8 @@ public static TokenGeneratePolicy fromValue(int value) {
     public static TokenGeneratePolicy defaultPolicy() {
         return JustGenerate;
     }
+
+    public static TokenGeneratePolicy respectOptOut() {
+        return RespectOptOut;
+    }
 }
diff --git a/src/main/java/com/uid2/operator/vertx/UIDOperatorVerticle.java b/src/main/java/com/uid2/operator/vertx/UIDOperatorVerticle.java
@@ -777,6 +777,13 @@ private void handleTokenGenerateV2(RoutingContext rc) {
                     }
                 }
 
+                if (isAfterCutoffDate(clientKey.getCreated()) && (!req.containsKey(TOKEN_GENERATE_POLICY_PARAM)
+                        || TokenGeneratePolicy.fromValue(req.getInteger(TOKEN_GENERATE_POLICY_PARAM)) != TokenGeneratePolicy.respectOptOut())) {
+                    LOGGER.error("request body misses opt-out policy argument");
+                    ResponseUtil.ClientError(rc, "request body misses opt-out policy arguments");
+                    return;
+                }
+
                 final TokenGeneratePolicy tokenGeneratePolicy = readTokenGeneratePolicy(req);
                 final IdentityTokens t = this.idService.generateIdentity(
                         new IdentityRequest(
@@ -1636,6 +1643,11 @@ private TokenGeneratePolicy readTokenGeneratePolicy(JsonObject req) {
                 TokenGeneratePolicy.defaultPolicy();
     }
 
+    private boolean isAfterCutoffDate(long timestamp) {
+        long cutoff = Instant.parse("2023-09-01T00:00:00.00Z").getEpochSecond();
+        return timestamp >= cutoff;
+    }
+
     private static final String IDENTITY_MAP_POLICY_PARAM = "policy";
 
     private IdentityMapPolicy readIdentityMapPolicy(JsonObject req) {